Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
231981	3.5	注意	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における Tree Manager の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3179	2012-10-19 15:14	2012-10-16	Show	GitHub Exploit DB Packet Storm

231982	3.5	注意	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における Panel Processor の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3176	2012-10-19 15:11	2012-10-16	Show	GitHub Exploit DB Packet Storm

231983	6.8	警告	オラクル	-	Oracle Industry Applications の Oracle Central Designer における脆弱性	CWE-noinfo 情報不足	CVE-2012-5066	2012-10-19 15:07	2012-10-16	Show	GitHub Exploit DB Packet Storm

231984	4	警告	オラクル	-	Oracle Industry Applications の Oracle Clinical/Remote Data Capture における HTML Surround の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-1763	2012-10-19 15:07	2012-10-16	Show	GitHub Exploit DB Packet Storm

231985	3.5	注意	オラクル	-	Oracle Financial Services の Oracle FLEXCUBE Direct Banking における BASE の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3157	2012-10-19 14:53	2012-10-16	Show	GitHub Exploit DB Packet Storm

231986	1.5	注意	オラクル	-	Oracle Financial Services の Oracle FLEXCUBE Direct Banking における BASE の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3145	2012-10-19 14:52	2012-10-16	Show	GitHub Exploit DB Packet Storm

231987	3.5	注意	オラクル	-	Oracle Financial Services の Oracle FLEXCUBE Direct Banking における BASE の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3142	2012-10-19 14:41	2012-10-16	Show	GitHub Exploit DB Packet Storm

231988	4	警告	オラクル	-	Oracle Financial Services の Oracle FLEXCUBE Universal Banking における BASE の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3141	2012-10-19 14:40	2012-10-16	Show	GitHub Exploit DB Packet Storm

231989	4.4	警告	オラクル	-	Oracle Solaris 10 における inetd の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-5095	2012-10-19 11:47	2012-10-16	Show	GitHub Exploit DB Packet Storm

231990	1.7	注意	オラクル	-	Oracle Solaris 10 および 11 における Kernel の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3215	2012-10-19 11:47	2012-10-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
292821	-	darold	squidclamav	The squidclamav_check_preview_handler function in squidclamav.c in SquidClamav 5.x before 5.8 and 6.x before 6.7 passes an unescaped URL to a system command call, which allows remote attackers to cau…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-3501	2024-11-21 10:41	2012-08-25	Show	GitHub Exploit DB Packet Storm

292822	-	apache	http_server	The proxy functionality in (1) mod_proxy_ajp.c in the mod_proxy_ajp module and (2) mod_proxy_http.c in the mod_proxy_http module in the Apache HTTP Server 2.4.x before 2.4.3 does not properly determi…	CWE-200 Information Exposure	CVE-2012-3502	2024-11-21 10:41	2012-08-23	Show	GitHub Exploit DB Packet Storm

292823	-	redaxo	redaxo	Cross-site scripting (XSS) vulnerability in include/classes/class.rex_list.inc.php in REDAXO 4.3.x and 4.4 allows remote attackers to inject arbitrary web script or HTML via the subpage parameter to …	CWE-79 Cross-site Scripting	CVE-2012-3869	2024-11-21 10:41	2012-08-14	Show	GitHub Exploit DB Packet Storm

292824	-	phplist	phplist	SQL injection vulnerability in admin/index.php in phpList before 2.10.19 allows remote administrators to execute arbitrary SQL commands via the delete parameter to the editattributes page.	CWE-89 SQL Injection	CVE-2012-3953	2024-11-21 10:41	2012-08-12	Show	GitHub Exploit DB Packet Storm

292825	-	phplist	phplist	Cross-site scripting (XSS) vulnerability in admin/index.php in phpList before 2.10.19 allows remote attackers to inject arbitrary web script or HTML via the unconfirmed parameter to the user page.	CWE-79 Cross-site Scripting	CVE-2012-3952	2024-11-21 10:41	2012-08-12	Show	GitHub Exploit DB Packet Storm

292826	-	rsgallery2	com_rsgallery2	SQL injection vulnerability in the RSGallery2 (com_rsgallery2) component before 2.3.0 for Joomla! 1.5.x, and before 3.2.0 for Joomla! 2.5.x, allows remote attackers to execute arbitrary SQL commands …	CWE-89 SQL Injection	CVE-2012-3554	2024-11-21 10:41	2012-08-10	Show	GitHub Exploit DB Packet Storm

292827	-	puppetlabs puppet debian canonical suse opensuse	puppet debian_linux ubuntu_linux linux_enterprise_server linux_enterprise_desktop opensuse puppet_enterprise	lib/puppet/ssl/certificate_authority.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, does not properly restrict the characters in the Common Name field of a Ce…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-3867	2024-11-21 10:41	2012-08-7	Show	GitHub Exploit DB Packet Storm

292828	-	puppetlabs puppet	puppet puppet_enterprise	lib/puppet/defaults.rb in Puppet 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, uses 0644 permissions for last_run_report.yaml, which allows local users to obtain sensitive configuration in…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-3866	2024-11-21 10:41	2012-08-7	Show	GitHub Exploit DB Packet Storm

292829	-	puppetlabs puppet	puppet puppet_enterprise	Directory traversal vulnerability in lib/puppet/reports/store.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, when Delete is enabled in auth.conf, allows remot…	CWE-22 Path Traversal	CVE-2012-3865	2024-11-21 10:41	2012-08-7	Show	GitHub Exploit DB Packet Storm

292830	-	puppetlabs puppet	puppet puppet_enterprise	Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, allows remote authenticated users to read arbitrary files on the puppet master server by leveraging an arbitrary user…	CWE-200 Information Exposure	CVE-2012-3864	2024-11-21 10:41	2012-08-7	Show	GitHub Exploit DB Packet Storm